What DRM does
A DRM-protected stream is encrypted. To play it, the app has to obtain a key, and the device has to show that it can keep the key and the decrypted picture safe. If the device can’t, the service either refuses to play or plays a lower quality. That’s why the same app can play HD on one device and only SD on another.
Widevine and its three levels
Widevine is Google’s DRM system. Google bought it in December 2010, and it’s built into Android and most Chromium-based browsers, including Chrome and Edge, as well as Firefox. It has three security levels:
| Level | Where decryption and processing happen | Resolution |
|---|---|---|
| L1 | Entirely inside a trusted execution environment (TEE), a protected area of the chip | Original resolution |
| L2 | In software or dedicated video hardware, even though a TEE is present | Fixed (limited) resolution |
| L3 | In software, with no TEE | Fixed (limited) resolution |
From Wikipedia’s summary of Widevine, checked October 2026. Each service decides what quality it allows at each level.
Why a device gets stuck in SD
Netflix gives the clearest public example. Its help centre says that to stream in HD on an Android phone or tablet, the device must support Widevine L1. If the app shows L3, you can only watch in SD, and that can happen when a device runs a modified version of Android. Netflix adds that changes to the system or the certification status of rooted or modified devices can stop the app working properly.
That links DRM to certification. Google warns that apps and features on devices without Play Protect certification may not work correctly. See certified vs uncertified Android TV boxes.
How to check your level
In the Netflix app on Android, Netflix’s steps are: My Netflix, the Menu icon, App Settings, then scroll to Diagnostics and open Playback Specification. Next to Widevine you’ll see L1 or L3. If it says L1 but HD still doesn’t play, Netflix suggests updating the app.
DRM, HDCP and IPTV
- HDCP is a separate check. DRM decides whether the device may decrypt the stream; HDCP protects the HDMI connection to your TV. A protected app can fail on either. See HDCP errors on streaming devices.
- IPTV players and DRM. Some IPTV players can play DRM-protected streams: Smart IPTV, for example, lists DRM support among the features of its current Samsung and Android versions. If a channel in your playlist is protected and your player or device can’t handle it, the channel won’t play while others do. Ask your provider which players and devices they support.
- Choose a certified device if you also use protected apps such as Netflix. See the best streaming device.
For how streams reach your device in the first place, see how IPTV works.